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PREFACF 


This  report  presents  an  architectural  concept  of  a 
complete  writer  to  reader,  automated  message  service  for  all 
of  the  Jepartment  of  Defense  units  on  the  Island  of  Oahu. 
It  Is  a  system  plan,  not  a  detailed  specification. 

For  budgetary  purposes,  the  results  of  a  brief  study  of 
sizing  and  costs  are  Included. 

The  proposed  system  plan  Is  based  upon  careful 
consideration  of  both  the  operations  on  Oahu  and  the 
projected  requirements.  To  assure  an  adequate  level  of 
understanding  of  need,  members  of  the  University  of  Southern 
California's  Information  Sciences  Institute  (ISI)  staff 
visited  Hawaii  on  March  22  through  March  29,  1973,  and, 
again,  April  through  April  27,  1973.  ISI  personnel 
conducted  Interviews  with  staff  both  In  Oahu  and  In 
Washington,  D.C.,  and  used  the  results  of  data  obtained  from 
CINCPAC. 

Thlri  work  was  supported  by  the  Advanced  Research 
Projects  Agency  (ARPA)  under  Contract  Number  DAHC 
15-72-C-0308, 


FORE WARD 


The  cu'^rent  methods  of  message  preparation  and  handling 
by  the  military  organizations  on  the  Island  of  Oahu  are 
largely  manual.  Though  needs  of  the  various  organizations 
and  sires  on  the  Island  are  reasonably  common,  limitations 
of  the  manual  system  require  that  message  functions 
frequently  be  duplicated.  Furthermore,  within  each 
organization  several  stages  of  manual  message  accounting, 
copying,  and  c  urler  forwarding  exist  between  the  electronic 
communications  and  the  action  officer.  For  most  action 
officers  there  Is  no  secure  communication  means,  other  than 
hand  routing,  to  coordinate  messages  either  for  preparation 
or  for  action.  The  manual  handling  results  in  high 
operations  costs  and  often  very  long  delays  in  messaoe 
prep.jration  and  delivery.  For  these  reasons,  the  current 
message  service  is  largely  treated  as  a  mail  service,  rather 
than  a  prompt  message  means. 

After  observing  many  action  officers  and  their  needs 
and  work  styles,  we  have  concluded  that  a  well  proven 
ttchnoiogy  and  methodology  exists  which  can  drastically 
reduce  the  operational  costs  and  virtually  e’iminate  the 
delays  characteristic  of  the  current  message  system. 
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The  particular  system  architecture  which  we  propose  In 
the  body  of  this  report  Is  based  on  ARPA  Network  technology 
which  currently  brings  cor,«nunI  catl  on  and  very  flexible 
message  ser\'Ices  directly  Into  offices  of  users  whose  tasks 
and  office  environments  are  very  similar  to  those  of  the 
action  officers  on  Oahu.  While  the  ARPA  Network  originally 
served  mainly  scientific  personnel  and  their  computer-based 
needs.  It  Is  also  currently  used  very  productively  by 
project  administrators,  coordinators,  technical  managers, 
liaison  personnel,  and  secretaries,  for  their  dally 
communication  needs.  The  on-line  message  services  provided 
by  the  ARPA  Network  on  commonly-shared  computers  and  the 
ability  to  quickly  coordinate  messages  with  others  down  the 
hall.  In  another  building,  or  thousands  of  miles  away,  via 
computer  terminals,  have  proven  to  be  of  Immense  value  to 
these  action  level  people. 

The  ARPA  Network  architecture  Is  suggested  here  because 
several  hundred  man-years  of  development  effort  have  been 
Invested  In  Its  various  components,,  contributing  directly  to 
the  problem  of  consolidated  telecotiimunl '■atl  ons  with  writer 
to  reader  automation.  Very  little  additional  effort  would 
be  required  to  orient  this  architecture  toward  the  military 
needs  and  environment. 

We  estimate  that  for  an  Investment  of  20  to  ^»0 
man-years,  approximately  $25  million  In  capital  costs  and 
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$200,000  per  year  for  leased  line  costs,  the  Oahu-wlde 
consolidated,  direct  writer  to  reader  automation  can  be 
Installed  with  large  attendant  savings,  a  significant 
Increase  In  the  efficiency  of  action  officers,  and  a  vast 
Improvement  In  message  promptness. 
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I  INTRODUCTION 


This  study  was  motivated  by  the  desire  to  provide  an 
advanced  teleprocessing  architecture  as  a  means  of 
substantially  reducing  DoO  Oahu  messa')'*  handling  costs  and 
delays.  After  an  Incisive  look  at  the  problem.  It  was 
determined  that  not  only  a  technology,  but  also  a 
methodology  was  needed  to  promote  a  smooth  transition  from 
the  present  manual  arrangement  to  a  largely  automated, 
reliable,  and  cost  effective  system.  This  report  suggests  a 
system  architecture  and  a  functional  methodology;  It  Is 
emphatically  felt  that  the  two  are  Inseparable  If  an 
effective,  user-oriented  system  Is  to  be  constructed. 

In  order  to  Inject  substance  and  validity  Into  this 
study,  the  system  architecture  Is  based  on  operational, 
state  of  the  art  message-handling  system  components.  These 
components  can  be  customized  to  Oahu's  needs  to  dramatically 
reduce  delay  times  and  provide  greater  Interaction  than  the 
present  manual  service.  Technically,  this  entire  system 
could  be  operational  In  less  than  2h  months. 

This  report  1"  a  gross  system  guideline  and  should  not 
be  misconstrued  as  a  complete  system  specification.  The 
guideline  reflects  our  experiences  In  an  environment  not  too 
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INTRODUCTION  (cont.) 


unlike  that  of  Oahu.  A  careful  analytic  and  simulation 
study  should  follow  this  work  In  order  to  produce  detailed 
specifications  and  costs. 

Although  the  principal  focus  of  this  study  Is  the 
solution  of  the  Oahu  communications  problem,  the  system 
should,  at  the  same  time,  be  viewed  In  larger  context. 
Since  the  proposed  communications  architecture  Is  relatively 
Independent  of  physical  area  and  of  number  of  users  served, 
the  Oahu  solution  might  serve  as  a  prototype  for  other 
similar  sites;  It  can  also  serve  In  expanded  form  as  a 
worldwide  military  communications  system. 

The  basic  system  architecture  can  accommodate  new 
services  and  easily  expand  or  contract  without  disruption  of 
ongoing  operations.  Thus  the  Oahu  military  community  will 
not  be  constrained  by  a  specific  mechanism  for  their  current 
mode  and  level  of  operation. 

Military  communications  on  the  Island  of  Oahu  are 
currently  handled  by  a  sizable  collection  of  communications 
personnel  trained  In  the  handling  and  distribution  of 
messages.  They  currently  provide  the  Interface  between  the 
people  who  wish  to  send  and  to  receive  messages  and  the 
local  communications  equipment.  Approximately  two  thousand 
personnel  are  employed  on  Oahu  to  perform  this  service  at  a 
cost  of  about  $20  million  per  year. 

Pa^,  i 
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IN'RODUCTION  (cont.) 


This  method  of  operation  his  a  number  of  serious 
drawbacks.  For  examp le^  because  of  the  large  number  of 
personnel  required  to  handle  messages  for  others,  the  cost 
of  ccranunl  cat  I  ons  Is  very  high.  Each  message  must  be 
handled  many  times.  Introducing  Inconvenience  and  delay.  Of 
the  many  possible  approaches  to  solving  this  problem,  all 
reduce  to  ones  namely,  to  lower  costs,  the  number  of 
communications  personnel  must  be  reduced.  However,  In  order 
to  reduce  the  number  of  personnel,  their  tasks  must  be  taken 
over  by  automation  of  their  accounting  and  routing  functions 
and  by  providing  direct  communications  capability  to  the 
offices  of  message  senders/receivers. 

To  fully  realize  the  cost  and  functional  benefits  of  an 
automated  system.  It  Is  essential  that  we  bring  on-line 
terminal  communication  directly  to  the  action  officer  and/or 
his  secretary.  This  will  not  require  a  terminal  for  every 
officer  on  the  Island,  since  In  most  cases  several  officers 
and  support  personnel  are  clustered  In  a  single  physical 
office  space.  Their  traffic  levels  are  such  that  several 
officers  (average  of  3)  can  share  a  terminal  without 
conflict.  By  allowing  these  people  to  be  directly  on-line, 
the  system  can  provide:  complete  accountability  of  messages; 
preparation  aids;  scanning  aids;  Interoffice  communication; 
message  status  reporting;  task  listing  by  priority,  with 
audible  and  visual  alarms,  and  many  other  personal  aids  to 
enhance  the  effectiveness  of  action  officers. 


INTRODUCTION  (cont.) 


Bringing  the  communications  directly  to  the  user  offers 
a  far  reaching  set  of  capabilities  that  extend  beyond 
anything  currently  available  and  with  more  complete  security 
protection.  Not  only  are  delay  times  of  seconds  attainable, 
but  the  possibility  for  Informal  I ntcr-termi nal 
communications  can  Improve  the  operation  of  a  unit  and 
greatly  Improve  security. 

In  order  to  achieve  these  objectives,  we  propose  only 
that  the  structure  of  existing  computer  and  communication 
systems  be  adopted  and  tailored  for  use  by  the  military. 
The  basic  research  and  development  to  make  this  possible  Is 
essentially  complete.  When  the  existing  R&D  efforts  are 
used  for  the  foundation  of  the  proposed  overall  system. 
Investment  In  modification  of  existing  major  system 
components  on  the  order  of  a  few  million  dollars  can  be 
expected,  with  an  estimated  delivery  time  of  about  two  years 
after  approval.  However,  If  a  new  system  Is  designed  from 
the  beginning,  costs  In  excess  of  $50  million  can  easily  be 
expected,  with  a  final  system  delivered  In  three  to  five 
years . 

Two  systems,  TENEX  [1]  and  Multics  [2],  have  already 
been  developed  and  made  operational.  These  systems.  In 
essence,  perform  this  kind  of  message  service  today.  The 
TENEX  system,  based  on  the  the  DEC  PDF- 10,  provides  a 
message-hand i I ng  service  on  the  ARPANET  [33;  Multics,  based 
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INTRODUCTION  (cont.) 


on  a  Honeywell  6180*  provides  a  capability  for  handling 
messages  and  for  multilevel  security  safeguards.  Either  of 
these  systems  Is  capable  of  effectively  supporting  the 
communications  requirements  for  Oahu.  Software  development 
Is  needed  to  tailor  the  system  to  the  specific  requi  re^r.cnts 
of  the  users  of  Oahu.  However,  fundamental  changes  to  the 
underlying  operating  system  structure  are  not  required. 

A  reliable  communications  system  Is  needed  to  Interface 
the  users  to  these  machines.  The  Interconnection  should  be 
such  that  the  users  are  totally  unaffected  by  the  failure  of 
an  Individual  computer  and  Its  location.  The  ARPANET 
packet-switching  technology  developed  by  ARPA  Is  extremely 
well  matched  to  this  kind  of  performance.  Although  other 
forms  of  communications  can  serve  to  Interconnect  the  user 
and  computers,  we  have  focused  on  the  packet-switching 
application  In  this  plan  because  It  Is  more  reliable  and 
more  flexible  In  serving  a  wide  variety  of  users  and  user 
needs.  Further,  the  system  Is  easily  scalable  In  size. 

Communication  of  separate  Intelligence  community 
traffic  through  a  GENSER  network  Is  easily  achieved.  The 
network  architecture  proposed  Is  flexible  enough  tc  extend 
to  any  capacities  that  can  be  reasonably  foreseen  In  the 
near  future.  Further,  the  proposed  system  permits  the 
Interconnection  of  computers  to  provide  other  services. 
Also,  the  network  can  be  easily  Interfaced  to  other 
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comnunlcatlon  systems  (I.e.,  AUTOOIN)  for  worldwide 
connecti vl  ty . 

In  the  remaining  sections  of  this  report  we  develop 
this  plan  In  greater  deta  1,  In  SECTION  II  we  describe  the 
communications  problem  on  chc  Island  of  Oahu,  as  we  perceive 
It,  In  SECTION  III  we  discuss  the  nature  of  the  user 
requirements  and  show  how  desirable  and  workable  Is  the 
objective  of  placing  the  user  directly  on-line.  In  SECTION 
IV  we  propose  an  overall  system  and  describe  Its  operation. 
In  SECTION  V  we  cover  the  magnitude  of  the  system  required. 
In  SECTION  VI  and  VII  we  describe  detailed  cost  and 
Implementation  considerations. 

Briefly,  then.  In  this  report  we  describe  a  plan  for 
consolidation  of  coifimuni  cat  I  ons  services  on  Oanu  which 
relies  on  placing  the  users  directly  In  contact  with  an 
automated  message-handling  service.  This  service  would  be 
provided  by  a  set  of  computer-based  message  processors 
confl'iured  to  provide  message  handling  with  security 
capability  and  high  reliability.  These  processors  would  be 
interconnected  with  each  other  and  the  users  via  a 
packet-switch  network.  The  entire  system  would  provide 
essentially  "Immediate  (seconds)  message  delivery".  The 
system  would  aval '.able  within  two  years  at  a  total  cost  of 
approximately  $25  million. 
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We  believe  this  approach  Is  an  effective,  expandable 
way  to  proceed  In  consolidation  of  the  telecommunications 
services  on  Oahu. 
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11  PROBLEM  DESCRIPTION 


INTRODUCTION 

There  Is  an  acute  telecoimnunl  cat  tons  problem 
confronting  the  military  complex  and  other  Federal 
governmental  agencies  on  the  Island  of  Oahu.  The  problem 
with  existing  communications  methods  Is  one  of  both  high 
costs  and  tong  processing  and  delivering  delays  In  the 
Island^s  message  traffic. 

For  Incoming  messages,  the  problem  results  from  the 
numerous  levels  of  message  handling  now  prevalent.  Each 
stage  In  this  process  usually  Involves  manual  logging, 
copying,  pigeon-holing,  and  a  courier  schedule  In  order  to 
reach  the  next  stage.  Typically  three  stages  are  required 
to  reach  the  action  officers  the  individual  who  will.  In 
fact,  take  action  on  the  message  or  require  Information. 
Each  operation  at  each  stage  Involves  queuing  from  several 
minutes  to  several  hours.  Outgoing  messages  are  coordinated 
with  several  action  officers,  often  requiring  several  hours 
or  days  of  an  offlcer^s  time.  Thereafter,  the  message,  when 
released,  must  move  upward  through  the  same  multiple  stages. 
Coordination  Is  another  aspect  of  the  communication  problem. 
Essentially  all  of  the  delays  and  the  manpower  required  to 
support  this  manual  system  can  be  eliminated  by  discarding 
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PROBLEM  DESCRIPTION  (cont.) 

the  message  center  concept  and  bringing  electronic 
conmiuni  cat  I  ons  directly  to  action  officers,  along  with 
automated  control  functions. 

The  current  operations  can  be  characterized  as  follows 
(see  Table  1).  There  are  currently  2k  military  and 
governmental  locations  housing  96  first-level  communications 
centers  which  are  structjr#»d  In  many  different  ways. 

Each  message  center  has  the  responsibility  of  receiving 
messages  from  their  point  of  origin  via  the  ASC  facility  at 
Wahlawa  and  disseminating  them  to  approximately  850  next 
level  addressees.  The  latter.  In  turn,  distribute,  control, 
and  recelvo  messages  for  6,000  to  7»000  action  officers.  A 
significant  set  of  these  centers  has  provided  ad  hoc 
separate  solutions  to  message  handling.  As  a  result,  there 
Is  a  wide  variety  of  equipment  and  processes  In  use  on  the 
Island.  The  heterogeneity  of  outdated  equipment,  coupled 
with  local  optimization,  cause  high  total  system  facility, 
equipmerit  and  personnel  costs.  The  local  centers  have 
Individually  Improved  services,  within  the  scope  and  budget 
of  their  limited  charters,  to  automate  message-routing  list 
generation  and.  In  one  case,  message  entry.  However,  the 
lack  of  a  consolidated  effort  has  prevented  the  systematic 
approach  required  to  obtain  the  complete  and  reliable 
wr I ter-to-reader  automation  necessary  for  present  and  future 
needs. 
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Table  1 


OAHU  COMPLEX 

t  2A  LOCATIONS  WITH  96  CENTERS 

t  21A7  MESSAGE  SUPPORT  PERSONNEL 

t  $21,5  MILLION  ANNUALLY  (M  &  0  COSTS) 
t  ^  850  PRIMARY  ADDRESSEES 

t  ^  6000  ACTION  OFFICERS 
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PROBLEM'  DESCRIPTION  (cont.) 


HIGH  MANPOWER  REQUIREMENTS 

Supporting  the  communications  system  are  2,147  message 
personnel  that  have  responsibility  only  for  trafficking 
messages  around  the  Island.  They  arf  not  messa je  senders; 
they  are  not  message  recclvejs;  they  are  message  support 
personnel . 

Many  message  centers,  critical  centers  among  them 
(e.g.,  Kunia),  anticipate  a  30X  reduction  In  manpower  over 
the  next  12  months.  These  sites  are  currently  operating  at 
full  capacity  In  terms  of  message-handling  capabilities. 
They  cannot  sustain  current  traffic  levels  within  the 
present  operating  environment  with  reduced  manpower. 

The  2,147  message  support  personnel  presently  consume 
$21.5  million  annually  In  O&M  costs,  plus  communications 
costs.  In  meeting  the  Island  s  communication,  needs. 
Concomitant  with  manpower  reductions,  the  telecommunications 
systems  must  necessarily  reflect  a  significant  decrease  In 
operating  and  maintenance  costs  while  providing  Improved 
performance. 

USER  INACCESSIBILITY 

The  AUTOOIN  system  and  existing  automated 
message-routing  determination  processors  (LDMX,  ACAMPS,  et. 
al.)  have  demonstrated  the  practical  ability  of  moving 
messages  several  thousand  miles  on  a  priority  basis  In 
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.^ROBLE^'  DESCRIPTION  (cont.) 

minutes  or  even  seconds.  However,  In  the  current  Oahu 
complex  the  first  and  last  1,000  feet  between  reader/writer 
and  communications  system  typically  add  several  hours  to 
message  delivery  time.  In  addition  to  these  delays 
Incurred,  a  high  dollar  cost  Is  required  to  maintain 
control,  audit  capability,  and  mobility  of  the  messages  In 
the  manual  environment. 


Ill  FUNCTIONAL  REQUIREMENTS  OF  AN  AUTOMATED  SYSTEM 


CONSOLIDATED  AND  AUTOMATED  SERVICES 

An  overall  goal  of  a  future  Oahu  telecommunications 
system  Is  to  significantly  reduce  costs  of  operations,  of 
maintenance,  and  of  manpower.  This  objective  Is  realized  by 
automation  of  the  message  services,  a  consolidation  of  the 
facilities,  and  an  Integration  of  the  mul tl -servi ce  user 
community  with  respect  to  the  message  services  offered. 
Furthermore,  these  objectives  can  be  realized  promptly. 

The  proposed  automated  system  allows  a  small  number  of 
Identical,  distributed  telecommunications  centers  to  serve 
all  subscribers  Independent  of  service  affiliation,  and 
Independent  of  the  subscribers'  geographical  location  on  the 
Island. 

IMPROVED  SERVICES 

An  equally  lmpor:ant  goal  Is  to  Improve  the 
effectiveness  of  the  telecommunications  functions  by 
providing  new  communications  methods  that  closely  couple  the 
action  officers  (who  generate  and  respond  to  messages)  In  a 
man-machine  environment  that  will  literally  bring  the 
message  service  to  the  office  of  the  action  officer.  Such  a 
communications  system  should  provide  the  action  officer  with 
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powerful  but  natural  aids  to  deal  with  nessage  activities 
directly,  rather  than  through  Intermediate  message 
processing  centers.  Effectively,  the  system  should  be!  1) 
easy  to  use;  2)  responsive;  and  3)  complete  as  an  electronic 
message  service., 

EXTENSION  OF  SERVICES 

These  design  objectives  encompass  all  on-Island  message 
needs,  both  general  services  traffic  (GENSER)  and 
Intelligence  traffic  (Intelligence).  The  system  should 
mediate  off-Island  communications  through  the  ASC  facility 
In  such  a  way  that  the  discourse  between  the  action  officer 
and  the  system  appear  to  be  the  same  as  for  on-Island 
correspondence. 

Such  a  communications  can  be  extended  to  carry  mixed 
mode  (messages  and  data  processing)  traffic,  so  that  WWMCCS 
and  other  virtual  networks  may  be  integrated  at  a  small 
additional  cost.  Thus,  an,  terminal  can  access  all 
available  services. 

SYSTEM  PERFORMANCE  REQUIREMENTS 

The  proposed  architecture  Is  described  In  Section  IV  of 
this  report.  Performance  requirements  for  the  system  are 
briefly  listed  here. 

Reliability,  Maintainability,  and  Survivability  —  A 
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proposed  system  should  be  redundantly  constructed  and 
connected  to  provide;  high  reliability.  Components  should  be 
modular  In  design  and  function.  The  connectivity  and 
modularity  result  In  a  system  wit)  Immunity  to  conventional 
hardware  failure  and  survivability  from  attack  or  sabotage; 
stations  surviving  attack  or  failure  can  operate  together  as 
a  coherent  entity. 

Responsiveness  —  The  system  must  support  users  In  an 
Interactive  mode  and  must  comply  with  message  delivery  time 
standards  established  by  the  JCS. 

Security  —  The  system  must  satisfy  security  criteria 
simlllar  to  those  wItiJn  AUTODIN. 

Accountability  --  Data  and  message  accountability  must 
be  a''allable  within  all  levels  of  the  proposed  system. 

Variable  Capacity  —  The  system  architecture  must 
possess  the  ability  to  be  e'^panded  or  contracted  an  order  of 
magnitude  In  capacity  without  causing  disruption  or 
degradation  of  performance. 

MESSAGE  SERVICE  REQUIREMENTS 

As  mentioned  above.  It  Is  the  Intent  of  this  report  to 
specify  a  system  which  brings  direct  cccess  to  message 
service  Into  the  office  of  the  action  officer.  Two  forms  of 
message  service  are  recommended:  1)  to  perform  those 
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functions  of  the  current  formal  message  service,  and  2)  a 
new.  Informal  message  service. 

Informal  Message  Service 

The  Informal  message  service  does  not  exist  presently, 
except  by  telephone  which  In  most  cases  Is  not  secure. 
Recommended  Is  a  mechanism  to  allow  two  or  more  people  to 
securely  link  together  to  discuss  a  problv'*m  before  that 
problem  becomes  a  matter  of  record,  A  very  serious 
potential  drawback  to  the  current,  nonautor.ated  system  Is 
that  an  action  officer  may  delay  communicating  about  a 
problem  until  he  Is  certain  that  he  Is  willing  to  allow  the 
communication  to  become  a  matter  of  record. 

The  Informal  messoge  service  should  be  provided  both  by 
an  "electronic  mailbox"  <jnd  by  direct,  terml  nal  -  to-terml  nal 
linking.  This  service  should  exist  at  all  priority  and 
security  levels,  corresponding  to  the  formal  service,  and 
there  should  be  a  guarantee  that  these  communications  will 
not  be  recorded  or  archived. 

Formal  Message  Service 

The  formal  message  service  Is  expected  to  be  completely 
automated  from  writer  to  reader  and  to  provide  all  of  ’’he 
services  of  the  current,  nonautomated  message  service. 

For  both  the  formal  and  Informal  service,  the  system  Is 
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designed  to  maintain  continuity  of  service  and  extreme 
reliability.  No  mersage,  whether  formal  or  Informal,  should 
ever  be  lost  or  mlsrouted. 

MESSAGE  CREATION  AND  TRANSMISSION 

With  respect  to  outbound  messages,  the  action  officer 
or  his  designee  require  a  number  of  capabilities.  They  are! 

Text  Creation  —  An  editing  mechanism  which  will 
provide  the  user  with  a  set  of  easy  to  learn  and  easy  to  use 
commands  for  creating.  Inserting,  deleting,  and  modifying 
text  which  will  become  the  body  of  a  message. 

Coordination  —  Automated  aids  to  facilitate  the  "hand 
carry"  phase  of  message  preparation  during  which  the  text 
content  Is  cleared  with  Interested  and/or  responsible 
parti es. 

Routing  —  A  normal  part  of  the  message  preparatlor. 
facility  which  queries  the  writer  to  obtain  the  correct  and 
appropriate  set  of  on  and  off-Island  addressees  for  a 
message.  This  phase  requires  that  valid  routing  be 
supplied.  Errors  are  detected  and  Interactively  corrected. 

Release  —  A  mechanism  for  releasing  a  message  after  It 
has  been  created  and  coordinated.  This  Is  controlled  by  the 
responsible  action  officer.  At  the  Instant  of  release,  the 
message  Is  Internally  queued  for  distribution. 
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Distribution  —  A  mechanism  Internal  to  the  message 
facility  which  Insures  the  transmission  of  off-Island 
messages  via  ASC  and  the  delivery  of  on-Island  messages  via 
the  facility  Itself.  The  system  guarantees  that  the 
distribution  addressee  Is  a  valid  entry  In  the  routing 
gul de. 


Status  Query  —  A  facility  by  which  the  originator  or 
addressees  of  messages  may  query  th**  message  system  to 
ascertain  the  general  status  of  the  distributed  message. 
Examples  of  queries  are:  “Has  It  been  read?**,  "By  whom?", 
“Is  action  pending?",  "By  whom?". 

MESSAGE  RECEPTION 

Each  action  officer  must  have  a  complete  set  of 
capabilltes  for  managing  his  received  messages.  They  are: 

Alerts  —  An  audio  and/or  visual  alarm  to  alert  him  to 
the  arrival  of  a  message  or  coordination  request. 

Hierarchy  —  Messages  and  requests  must  be  maintained 
In  a  hierarchical  fashion  reflecting  the  priority  of  the 
messages. 

Scanning,  Viewing,  and  Browsing  —  The  ability  to  scan 
the  hierarchy  of  messages  awaiting  action  by  criteria  such 
as  precedence  and  age.  Items  for  action  require  full 
viewing.  Browse  mode  should  be  available  for  Information 


Page  28 


FUNCTIONAL  REQUIREMENTS  (cont.) 


Items  or  for  large  volume  reception.  Aids  for  Increasing 
efficiency  In  sea  mlng  large  numbers  of  messages  should  be 
provl ded. 

Fanout  and  Redirection  —  A  limited  capability  to 
forward  received  messages  to  other  action  officers  and 
redirect  messages  within  addressee  boundaries. 

Action  Indication  —  For  on-Island  originated  traffic 
received  on-Island,  a  method  whereby  recipients  can  provide 
feedback  to  the  sender  concerning  the  state  of  the  received 
message.  Examples  are  message  not  read,  read  but  no  action, 
action  pending,  etc. 

MESSAGE  SERVICE  SUPPORT 

Additional  supporting  facilities  should  be  available  to 
both  senders  and  receivers  to  aid  message-related  tasks. 
Included  here  are  access  to  printed  copy  and  archives  for 
referencing  previous  messages. 

As  additional  aids  are  Implemented  —  abstracting 
service,  personal  keyword  searching,  etc.  —  they  should 
Immediately  become  available  to  the  entire  Oahu  community. 
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COMMUNICATIONS  NETWORK 

Figure  1  Illustrates  the  proposed  basic  consolidated 
user-service  network.  It  Is  composed  of  an  Island-wide 
communications  system  called  a  "subnet"  which  provides 
connectivity  between  users,  services,  and  e:«ternal 
communication  systems  such  as  AUTODIN.  The  properties  of 
this  network  are  such  that  It  creares  a  common  community  of 
users  aiid  services.  User  connectivity  Is  homogeneous  over 
the  entire  subnet.  Independent  of  piyslcal  location.  All 
terminals  are  multl-homed  via  redundant, 
dynamically-switched  communications  paths  to  all  available 
services.  Terminals  In  geographically  adjacent  locations 
can  be  connected  to  the  subnet  at  logically  and  electrically 
Isolated  points,  thus  Insulating  a  given  user  from  local 
failures.  Information  transition  times  across  the  subnet 
will  be  on  the  order  of  100  milliseconds,  providing 
Immediate  and  Interactive  user  service  uniformly  throughout 
the  common  environment  of  Oahu. 

Figure  2  Is  a  more  detailed  abstract  of  the  system 
architecture  proposed  for  the  Island.  It  Illustrates  a 
network  composed  of  action  officers"  terminals  at 
geographically  separated  sites.  The  terminals  are  connected 
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by  voice  grade  lines  to  Terminal  Interface  Message 
Processors  (TIPs)  [i»],  like  those  of  the  ARPANET,  or  similar 
small,  standardized  minicomputers;  the  latter.  In  turn,  are 
Interconnected  through  high-speed  lines  leased  from  HAWTEL 
and/or  other  communications  media  (such  as  the  military 
microwave  now  used  on  the  Island).  Several  larger 
processors  are  also  connected  to  tie  TIPs  to  supply  the 
message-service  functions.  The  communications  medium  Is  a 
distributed,  packet-switched,  stor e-and-f orward  network. 
Traffic  routing  Is  governed  adaptively  by  the  TIPs  over 
redundant  network  paths.  Via  this  network,  each  action 
officer  can  reliably  access  the  various  message  functions  as 
well  as  other  remote  action  officers.  The  TIPs  are  located 
about  the  Island  where  action  officers  reside,  as  well  as 
where  the  several  message  processors  will  be  located.  The 
TIPs  act  both  as  a  multiplexer,  concentrating  many  terminal 
lines,  and  as  a  routing  processor,  dynamically  optimizing 
message  traffic  routes  within  the  network. 

Within  the  communications  subnetwork,  error  rates  and 
down-time  can  be  made  to  conform  to  virtually  any  desired 
specification.  Off-the-shelf  equipment  provides  the 
following  features:  1)  at  least  two  transmission  paths 
between  nodes;  2)  cyclic  checksums  Incorporated  and  designed 
to  detect  transmission  errors.  The  error  detection  Is 
accompanied  by  re-transmi sslon  rather  than  error  correction. 
Experience  with  the  ARPANET  has  shown  that  the  undetected 
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error  rate  Is  better  than  one  bit  In  a  trillion;  and  3)  TIPs 
ruggedized  against  external  environmental  conditions  and 
whose  operation  Is  Independent  of  any  electromechanical 
devices  (except  fans). 

MESSAGE  PROCESSORS 

The  message  processor  does  not  support  user  Jobs. 
Rather,  It  executes  special  system  processes  which  Implement 


message 


service. 


of  f-the-shel f , 


conmercl a  1 1 y-ava 1 1 ab 1 e  candidates  for  message  system 
processors  are  TENEX  and  Multics,  either  of  which  can  be 
stripped  of  their  general-purpose  capabilities  and  optimized 
for  message  service  for  the  Island  environment.  There  are 
no  user  terminals  directly  connected  to  the  message 
processor;  all  access  to  the  service  Is  through  the  network. 

The  message  processor  Is  backed  with  very  large  files 
to  keep  the  current  traffic  (say  the  previous  30  days) 
on-line  and  accessible  by  authorized  action  officers. 

Message  processors  are  redundantly  connected  to  the 
TIPs,  which  are  In  turn  redundantly  Interconnected  such  that 
when  a  temporary  outage  occurs,  a  second  TIP  can  serve  the 
message-processor  host. 

One  function  of  the  message  processor  Is  to  keep 
another  message  processor  up-to-date  with  respect  to  file 
changes.  Any  time  the  status  of  a  message  changes,  a 
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message  processor  relays  updating  Information  to  a  second 
processor.  Thus,  should  a  message  processor  cease 
functioning,  a  second  processor  can  Immediately  assume  the 
tasks  ongoing  of  the  first  machine.  In  most  cases,  the  TIP 
serving  a  particular  message  processor  will  be  able  to 
perform  the  switchover  function  In  a  manner  which  Is 
Invisible  to  the  user  at  the  terminal.  After  sensing  the 
lack  of  Immediate  acknowledgement  from  a  processor,  the  TIP 
will  dynamically  redirect  Its  user  traffic  to  the  designated 
backup  rrocessor. 

OFF- ISLAND  CONNECTIVITY 

In  addition  to  the  message  processors,  the 
Inter-Network  Translator  (INT)  In  Figure  2  connects  the 
AUTOOIN  switch  for  off-Island  communications  systems.  The 
INT  Is  a  mini  computer  Intended  to  be  kept  very  simple, 
straight-forward,  and  reliable.  Its  primary  function  Is  to 
accept,  reformat,  and  transmit  messages  between  the  AUTODIN 
switch  and  the  message  processors.  It  will  also  have  the 
capability  of  directing  AUTODIN  computer  traffic  to  and  from 
general  service  hosts  on  the  network,  such  as  WWMCCS. 
Reconfiguration  processors  of  this  nature  have  been  built 
frequently  for  the  ARPANET. 

Figure  3,  a  map  of  the  Island  of  Oahu,  shows  probable 
TIP  placement,  and  Table  2  lists  the  number  of  types  and 
terminals  for  each  location.  These  data  were  derived  from 
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DISTRIBUTION  OF  HARDWARE 


Locations 

No.  of  Act. 
Officers 

No.  of 
Terminals 

No.  of 
TIPS 

No.  of 

Multiplexers 

1) 

CP  SMITH (3) 

900 

270 

6 

4 

2) 

KUNIA(3) 

30<2) 

10 

2 

0 

3) 

HICKAM(3) 

900 

310 

6 

10 

4) 

MAKALAPA 

610 

230 

5 

10 

5) 

FT  SHAFTER 

470 

140 

3 

30 

6) 

SCHOFIELD 

580 

140 

3 

30 

7) 

ALIAMANU 

60 

15 

1 

2 

8) 

KAMEHAMEHA 

? 

15 

2 

9) 

POAMOHO 

? 

2 

10) 

FT  RUGER 

7 

2 

11) 

ARMSTRONG 

20 

6 

1 

12) 

FORD  IS 

180 

60 

1 

10 

13) 

HELEMANO 

150 

5 

2 

14) 

WAHIAWA 

150 

50 

1 

0 

15) 

BARBERS  PT 

450 

150 

3 

10 

16) 

EWA  BFACH 

? 

5 

5 

17) 

LUALUALEI 

240 

30 

1 

0 

18) 

PEARL  HARB 

500 

170 

4 

30 

19) 

MOANAIUA 

100 

20 

- 

2 

20) 

DAMON  TRAC 

20 

5 

1 

2 

21) 

WHEELER 

200 

70 

2 

10 

22) 

KANEOHE  MC 

200 

40 

1 

3 

23) 

BARKING  SN 

60 

15 

- 

2 

24) 

HONOLULU 

60 

15 

- 

2 

TOTAL 

5880 

1775 

39 

167 

NOTE: 


(1)  Numbers  of  Action  Officers  estimated  from  Joint  Military  Telephone  Book 
of  Hawaii,  10/72,  and  Organization  Directories. 

(2)  Kunia  requires  special  consideration 

(3)  Message  Processors  Locations 
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several  sources,  discussed  In  Section  V.  The  map  and  table 
are  keyed  through  the  site  numbers  shown  on  the  map. 

TERMINALS 

The  action  office  Is  typically  manned  by  one  to  six 
action  officers  and  one  or  more  secretaries  or  clerk 
typists.  We  can  expect  that  the  Immediate  evolutionary  step 
Into  an  automated  system,  though  enhancing  their  actions, 
would  not  radically  change  the  style  of  the  action  officers" 
work  habits.  Thus,  we  have  assumed  a  soft  (CRT)  terminal 
and  a  hardcopy  (printing)  terminal  available  to  the 
secretary  end  sometimes  one  or  two  additional  soft  terminals 
for  the  office,  depending  upon  numbers  of  officers,  traffic 
levels,  and  mission.  There  are  no  bothersome  system 
llmicatlons  to  these  assignments,  and  they  can  grow  and 
shrink  on  demand  during  operation. 

Both  the  hard  and  soft  terminal  commercial  markets  In 
the  United  States  are  highly  competitive  and  functional 
designs  are  well  established.  Soft  terminals  for  the 
commercial  market  are  not  ordinarily  designed  with  security 
considerations  In  mind  (mainly  due  to  RFI  problems). 
However,  we  believe  the  technology  exists  to  Immediately  and 
economically  produce  the  appropriate  terminals  given  the 
Impetus  of  the  number  of  terminals  required  for  the  Oahu 
compl ex. 
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The  hardcopy  terminals  should  be  assigned  at  various 
printing  rates,  depending  upon  traffic  demands  of  the 
particular  office.  Care  should  be  taken,  however.  In 
selecting  relatively  quiet  printers  In  order  to  maintain  a 
productive  office  environment. 


SECURE  NETWORK 


There  are  two  levels  of  security  problems  as  Indicated 
In  Table  3,  One  Is  within  the  general  service  traffic  where 
messages  range  from  unclassified  to  top  secret.  Another 
dimension  of  classification  within  the  general  service 
traffic  Involves  "eyes  only",  "specat",  etc.  To  provide 
message  security,  all  links  between  TIPs  must  be  encrypted. 
Furthermore,  TIPs  must  be  placed  In  physically  secure 
locations. 


Separation  of  terminals  on  the  basis  of  their  physical 
point  of  connection  provides  the  necessary  security  at  the 
user-level,  since  there  Is  no  way  for  the  user  to  modify  the 
behavior  of  the  processes  within  the  TIPs,  This  philosophy 
Is  extant  In  AUTOOIN,  Terminals  should  then  be  placed  in 
physical  environments  appropriate  to  use  and  security 
cons  I  derat  I ons . 
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SECURITY  CONSIDERATIONS 

•  ENCRYPTED  LINKS  BETWEEN  TIPS  AND  SECURE  TIP 

LOCATIONS 

•  TIP  SEPARATION  VIA  SYSTEM  PROCESSES  ONLY 

•  MESSAGE  PROCESSOR  SEPARATION  VIA  SYSTEM 

PROCESSES  ONLY 

o 

INTELLIGENCE-GENSER  CONSIDERATIONS 


•  SEPARATE  MESSAGE  PROCESSOR  AND  TERMINALS  WITH 

PRE  AND  POST-ENCRYPTION  ACROSS  THE  NET 

t  SMALL  SEPARATE  SYSTEM 
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The  same  design  philosophy  applies  to  the  message 
processors,  since  there  Is  no  way  for  a  user  to  modify  the 
actions  of  the  message  processors.  That  Is,  the  message 
processors  execute  only  system  processes  an.,  terminal 
devices  are  connected  to  the  processors  only  through  system 
processes  In  the  TIPs, 

INTELLIGENCE  -  GENSER  CONSIDERATIONS 

Intelligence  Information  Is  a  completely  separate 
category  of  traffic  which  probably  accounts  for  about  15%  of 
all  Island  message  traffic,  either  of  two  solutions  are 
recommended  to  handle  the  Intelligence  service.  The 
preferred  solution  Is  to  use  a  separate  message  processor 
and  separate  terminals  but  the  same  subnet  for 
communications.  The  Intelligence  messages  are  pre-encr 1 pted 
prior  to  entering  the  subnet  and  are  de-encrlpted  after 
leaving.  These  external  encryption  devices  would  be 
provloed  only  at  IMP  and  terminal  locations,  combined  within 
this  framework,  both  Intelligence  and  GENSER  traffic  can  be 
combined  within  one  common  communication  medium  and  yet 
fully  separated  In  a  security  sense. 

The  alternative  Is  a  similar  but  smaller  separate  total 
system  for  Intelligence  traffic.  The  system  would  consist 
of  Independent  connections  to  the  ASC  facility,  and  separate 
Independent  message  processors,  subnet,  and  terminals. 
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SUMMARY 

In  summary,  the  proposed  system  architecture  Is  based 
on  the  ARPANET,  which  has  proven  In  three  years  of 
continuous  service.  It  has  demonstrated  an  ability  to 

Insulate  Itself  from  local  outages,  large  growth,  and  the 

addition  of  many  new  service  machines  and  users.  It  Is 

employed  by  hundreds  of  simultaneous.  Interactive  users 
throughout  the  United  States,  Including  Hawaii  via  a 

satellite  link.  The  message  processor  candidates  are  based 
on  operating  systems  which  have  been  used  on  the  ARPANET  for 
services  similar  to  those  required  by  the  proposed  system. 
In  short,  the  utility,  performance  capacities,  development 
requirements,  and  costs  of  the  proposed  system  are  well 
established.  A  design  based  upon  the  ARPANET  approach  Is 
Implcmentable  within  two  years,  will  meet  requirements,  and 
will  provide  an  economic  solution  to  the  Oahu 
telecommunications  problem. 
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INTRODUCTION 

In  order  to  accurately  estimate  the  size  requirements 
for  the  proposed  architecture,  the  following  sources  were 
consulted:  the  21  day  COTCO  study  [5],  Oahu  military 
organization  charts,  staff  directories,  and  maps  of  the 
physical  area  to  be  covered  by  telecommunications. 
Additionally,  several  man-weeks  were  spent  In  observing  a 
wide  variety  of  message  system  users.  Distribution  and 
quantity  of  message  traffic,  location  of  action  officers, 
action  officer  functions,  staff  locations,  and  the 
availability  of  office  support  personnel  were  all  factors 
used  to  determine  the  size  requirements  for  the  proposed 
system. 

TERMINAL  PLACEMENT 

The  goal  of  wr I ter-to-reader  automation  through 
elimination  of  manned  message  centers  requires  that 
terminals  be  located  within  easy  access  of  the  user.  The 
placement  of  terminals  In  this  analysis  Is  based  on  the 
number  of  action  officers,  how  they  are  clustered,  on  office 
locations,  and  on  the  distribution  of  message  traffic  for 
the  primary  addressees. 
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An  on-sIte  Inspection  of  many  of  the  action  offices 
revealed  that  from  one  to  six  officers  occupy  a  single 
office,  and  that  these  officers  are  supported  by  one  to 
three  secretaries  or  clerk  typists.  It  Is  recognized  that 
few  action  officers  type  or  care  to  type.  Hence,  terminal 
locations  provide  the  option  of  either  dealing  directly 
on-line  with  the  message-service  or  through  a  secretary, 
according  to  Individual  work  styles.  Personal  observations 
were  consistent  with  the  subsequent  analysis  of  the  COTCO 
study  data,  showing  mean  physical  clustering  of  action 
officers  to  be  about  four  to  six. 

In  an  effort  to  size  the  problem,  to  estimate  the 
number  of  terminals,  and  to  estimate  the  complexity  of 
wiring  them  Into  the  network,  four  commands  In  four 
different  locations  were  examined  In  detail.  This  analysis 
shows  uniformity,  which  allows  scaling  upward  to  cover  the 
entire  Island  with  an  accuracy  appropriate  to  the 
limitations  of  the  scope  of  this  report.  The  commands 
examined  were  CINPAC  at  Camp  Smith,  PACAF  at  Hlckam  Field, 
CINCPACFLT  at  Makalapa,  and  USARPAC  at  Fort  Shafter.  Among 
the  sices  for  which  detailed  Information  was  available, 
USARPAC  was  selected  for  a  detailed  network  terminal 
analysis.  Due  to  the  large  number  of  buildings  Involved, 
this  selection  represents  a  "worst  case"  condition. 
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For  this  analysis,  an  Interactive  terminal  has  been 
assigned  to  each  office  with  four  or  fewer  action  officers 
handling  more  than  100  messages  per  week.  An  additional 
printing  terminal  (hardcopy)  Is  assigned  to  be  shared  by  two 
adjacent  offices.  This  results  In  approximately  one  and 
one-half  terminals  per  office.  More  extensive  sharing  of 
terminals  Is  proposed  for  offices  with  less  than  100 
messages  per  week;  which  results  In  about  one-half  of  a 
terminal  per  office.  Including  the  hardcopy  terminals.  For 
offices  with  five  or  more  action  officers,  three  terminals. 
Including  hardcopy,  are  assigned  for  those  with  high  traffic 
volume,  and  one  and  one-hall  per  office  for  low  volume 
stations.  Terminal  placement  ;'.hould  be  reexamined  with 
regard  to  the  sensitivity  of  the  mission  of  the  station  In 
order  to  determine  those  offices  with  requirements  that 
deviate  from  the  norm. 

The  results  of  the  analysis  are  summarized  In  Table  2, 
Including  the  scaling  of  terminal  requirements  for  the 
entire  Island  based  on  the  number  of  action  officers 
determined  to  be  at  each  location.  The  number  of  action 
officers  was  obtained  from  the  Joint  Military  Telephone 
Directory  of  Hawaii.  The  analysis  reveals  a  fairly 
consistent  distribution  of  action  officers  over  all  bases 
considered  and  suggests  that  an  extrapolation  to  the  entire 
Island  can  be  made  at  an  average  of  three  action  officers 
per  terminal  (Including  both  hardcopy  and  Interactive 


Page  45 


SYSTEM  SIZING  (cont.) 


terminals).  It  Is  estimated  that  95X  of  tie  action  officers 
have  been  accounted  for  In  this  analysis. 

The  TIPs  are  distributed  over  the  Island  according  to 
the  number  of  terminals  required  at  a  site,  plus  a  few  TIPs 
added  to  provide  appropriate  connectivity  for  reliability 
and  for  "soft  failure"  capability.  The  TIP  distribution  Is 
shown  In  Table  2  and  on  the  map  of  Figure  3.  TIP  -siting  Is 
also  based  on  the  message  processor  locations  (Kunia  and 
HIckam),  and  on  majfimizing  the  reliability  of  operation  for 
HIckam,  Makalapa,  Fort  Shafter,  Camp  Smith,  and  Kunia. 
Where  possible,  multiplexers  to  nearby  TIPs  are  used  for 
locations  with  fewer  than  20  terminals;  they  are  also  used 
within  a  base  to  reduce  crypto  requirements.  A  TIP  can 
support  63  terminals  and  a  multiplexer  can  support  16 
terrnl  nal  s. 

BASE  COMMUNICATION 

The  detailed  layout  of  ARPAC  at  Fort  Shafter  (Figure 
4),  Illustrates  the  use  of  multiplexers  to  Implement  the 
connectivity  of  a  ba-e,  as  well  as  the  connectivity  of 
remote  users  around  the  Island.  The  multiplexer  minimizes 
the  number  of  TIPs  required  and  reduces  the  number  of  crypto 
devices.  The  number  of  multiplexers  required  throughout  the 
Island  was  calculated  by  scaling  up  from  the  Fort  Shafter 
layout  and  Is  dependent  on  the  number  of  buildings. 
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clustering  of  users,  and  security  restrictions  within  that 
location. 

The  connectivity  of  terminals  to  TIPs  Is  accomplished 
so  that  each  office  or  cluster  of  offices  Is  doubly 
connected.  That  Is,  half  of  each  of  the  clustered  terminals 
are  connected  to  one  TIP  and  the  remainder  to  a  second  TIP. 
In  the  event  of  a  TIP  or  line  failure,  the  office  or 
building,  remains  connected  to  the  network.  It  Is  assumed 
that  most  of  the  wiring  Is  accomplished  without  the  use  of 
crypto  devices  (l.e.  armored  cable  and  properly  Identified 
conduit).  The  connectivity  of  the  TIPs  and  TIPs  to  the 
network  Is  part  of  the  final  overall  network  design  and 
shown  In  Figure  2  for  reference  only. 

TERMINAL  CAPABILITIES 

Interfacing  the  action  officer  to  the  network,  message 
processor,  and  other  data  processing  services  necessitates  a 
closely  coupled  man-machine  system.  The  selection  and 
specifications  of  terminals  Is  critical  with  respect  to  the 
sensitivity,  skills,  and  work  habits  of  the  user.  Two  types 
of  Inexpensive  (about  $3»000  purchase  price)  terminals  can 
satisfy  the  Identified  needs  of  the  users  of  the  message 
services:  an  Interactive,  soft  copy  terminal  (CRT)  with  high 
speed  electronic  viewing  surface,  and  a  printing  device 
(hardcopy). 
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The  soft  copy  terminal  desirable  for  message 
creating  and  scanning  functions.  Including  message-delivery 
alarms  and  Interrogating.  When  hardcopy  Is  needed  for 
presentation,  draft  copy,  etc.,  o«jtput  can  be  directed  to  a 
pr I nter. 

The  speed  of  the  terminal  (and  of  the  system)  must  be 
carefully  matched  for  user  response  time  expectations.  A 
high  speed  display  of  at  least  2400  baud  and  preferably  4800 
baud  Is  anticipated.  Line  buffering  at  the  terminal  on 
Input  Is  suggested  In  order  to  enhance  system  performance  by 
reducing  effective  bandwidth  requirements. 

The  hardcopy  terminal  will  provide  the  printed  page, 
which  must  be  suitable  for  duplicating  (Xerox,  etc.),  and 
also  an  additional  keyboard  for  redundant  terminal  access. 
The  printing  mechanisms  must  be  reliable  and  print  at  a 
variety  of  speeds  to  meet  the  variable  traffic  loads  of  the 
different  offices.  A  "silent  printer"  Is  required  so  that 
It  can  be  located  within  office  spaces. 

SUBNET  CONSIDERATIMS 

Network  Analysis  Corporation  (NAC),  Glen  Cove,  New 
York,  through  a  contra':t  with  ARPA,  has  been  responsible  for 
the  ARPANET  topological  design  since  1969.  To  provide  the 
most  cost-effective  designs  subject  to  system  constraints, 
NAC  has  developed  a  large  body  of  analytical  techniques  that 
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have  been  Implemented  In  computer  programs  for  analysis  and 
design  of  distributed  packet-switched  networks.  These 
programs  were  used  to  provide  the  network  cost  and 
performance  data  In  this  report.  The  technique  used  employs 
a  complex  network  analysis  program  that  utilizes  heuristic 
routing,  time-delay  and  reliability  analyses,  and 
optimization  algorithms  to  generate  low-cost  designs. 

Under  subcontract,  NAC  provided  an  analysis  of  network 
connectivity  for  estimates  generated  early  In  our  study  of 
traffic  and  terminal  requirements.  The  breadth  of  their 
analysis  iias  allowed  us  to  supply  reasonably  accurate  subnet 
costs,  a  configuration,  and  reliability  estimates.  The 
primary  emphasis  centers  on  cost,  although  other  areas  such 
as  network  reliability  and  response  time  are  considered. 
The  constraints  on  the  topological  desl^gn  are  the  available 
common  carrier  circuits,  the  target  costs  and  throughput, 
and  the  desired  reliability. 

As  noted  above,  the  network  can  be  configured  to  obtain 
essentially  any  reliability  figure  desired.  However,  for 
reference  purposes,  the  connectivity  represented  In  Figure  3 
will  result  In  greater  than  99. 9Z  reliability  for  97%  of  the 
terminal  locations,  and  greater  than  90%  reliability  for  the 
remaining  3%,  the  noncritical  locations. 

Each  TIP  port  Interfaces  one  terminal  to  the  network. 
TIPs  are  located  at  most  of  the  2*1  sites  listed  In  Table  2. 
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Two  TIPs  are  assigned  to  several  locations  even  though  the 
number  of  terminals  at  the  location  Is  far  below  the  63 
ports  a  TIP  can  provide.  A  second  TIP  Is  assigned  to 
Improve  reliability.  No  TIP  Is  assigned  to  locations  with 
very  few  terminals;  rather,  the  terminals  at  these  sites  are 
multiplexed  Into  a  single  line  and  demultiplexed  at  the  TIP. 
Each  demultiplexed  channel  Is  connected  to  one  TIP  port. 

Numbers  of  terminals,  TIPs,  and  multiplexers  are  listed 
I n  Table  2. 

MESSAGE  PROCESSOR  TRAFFIC 

Table  4  summarizes  traffic  levels  In  and  out  of  the 
collective  message  processors.  File  access  Is  also  listed 
as  an  Important  determinant  In  system  component  selection. 


These 

data 

and 

access 

rates  are 

peaked  by  3  which  Is  an 

upper 

bound 

on 

today's 

loadl ng. 

and  are  based  on  the 

assumptions  summarized  In  Table  5. 

Some  assumptions  of  the  current  traffic  on  the  Island 
are  summarized  In  Table  5*  The  certainty  of  each  of  these 
numbers  varies;  thus,  they  are  worthy  of  a  few  brief 
comments.  In  general,  the  numbers  reflect  an  upper  bound 
where  data  were  gathered  at  different  times  or  estimates 
were  made  by  different  sources. 
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Table  4 

PEAKTIME  MESSAGE  TRAFFIC  FOR  THE  COLLECTIVE 
MESSAGE  PROCESSORS  (MP) 


MP-TIP 

BITS/SEC 

MP 

FILE  ACCESS 

lU 

OUT 

EDITING  INPUT 

12K 

30/sec 

COORDINATING  OUTPUT 

IlOK 

22/sec 

AUTODIN  INPUT 

16K 

.3/sec 

AUTODIN  OUTPUT 

3K 

.2/sec 

DISTRIBUTION  OUTPUT 

228K 

^5/sec 

FILE  UPDATES 

7K 

7K 

1/SEC 

TOTALS 

35K 

3il8K 

100/SEC 
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MESSAGE  TRAFFIC 

assumptions: 

NO.  MSGS. /DAY  GENERATED  =  6000 
ON  OAHU 

NO.  CHARS. /MSG.  =  2.5K 

EFFECTIVE  HRS./DAY  =  10 

PEAK  FACTOR  =  3 

AVG.  NO.  CHAR. /line  =  ^lO 

MSGS.  FROM  OFF- ISLAND  =  15.000/2A  HR.  DAY 

MSGS.  TO  OFF- ISLAND  =  5,000/2A  HR.  DAY 
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Six  thousand  messages  per  day  are  generated  on  the 
Island.  The  average  number  of  characters  per  message  Is 
2,500,  with  a  very  wide  dispersion  from  about  half  a 
paragraph  to  more  than  25  pages.  However,  the  average 
appears  to  hold  over  many  sample  days.  A  10-hour  work  day 
Is  assumed  since  most  personnel  work  an  8-hour  day,  although 
some  duty  watch  level  of  activity  continues  24  hours  and 
weekends.  Within  the  day  th-re  are  several  hours  where  the 
traffic  Is  higher  by  a  factor  of  3  over  the  average.  An 


average 

of  40 

characters  per 

1 1  ne 

1 s  assumed 

si  nee  the 

proposed 

system 

would  Involve 

1 1  ne 

buff er 1 ng 

by 

the 

termi nal . 

The 

number  of  messages  arriving  from 

off-Island 

through  AUTODIN 

Is  assumed  to  be 

15,000 

per  24- 

hour 

day. 

The  estimate  of  messages  generated  on  the  Island  destined 
for  off-Island  Is  5,000  per  24-hour  day. 

Message  creating  and  editing  of  6,000  messages  will 
generate  about  12,000  bits  per  second  at  the  peak  hour  of 
the  day  across  the  Interface  betv/een  TIPs  and  the  sum  of  all 
message  processors.  Coordinating  output  Is  related  to  the 
number  of  messages  generated,  and  Is  based  on  the  assumption 
that  during  coordination  ci  message  will  be  examined  II  times 
on  the  average.  Message  processor  interfaces  to  off-Island 
traffic  are  shown  In  Table  5,  along  with  distribution  output 
(which  Involves  the  message  alert  functions)  and  file 
updates  (to  keep  the  message  processors  In  one-to-one 
corr espondenc  e ) . 
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Figure  5  Is  a  suiwnary.  In  abstract  form,  of  the  data 
flow  through  the  collective  message  processors  at  peak 
periods.  The  archive  file  update  rate  Is  not  peaked;  It  Is 
averaged  over  2A  hours  rather  than  10. 

The  archive  Is  not  pictured  In  Figure  5  since  It  Is 
unclear  exactly  where  It  should  reside.  It  could.  In  fact, 
reside  outside  the  network,  say  In  Washington,  D.C. 

MESSAGE  PROCESSOR  REQUIREMENTS 

The  sizing  of  the  Central  Processor  Unit  (CPU)  to 
perform  the  tasks  outlined  In  Table  4  requires  detailed 
analysis  which  Is  beyond  the  scope  of  this  study.  However, 
preliminary  estimates  based  on  the  bandwidth  requirements 
from  TIP  to  message  processor,  the  number  of  files  accessed, 
the  number  of  expected  simultaneous  users,  and  experience 
with  TENEX  providing  similar  services  for  the  ARPANET 
Indicate  that  five  machines  should  be  sufficient.  Including 
essential  backup  capability.  Two  of  the  message  processors 
are  used  exclusively  for  Intelligence  traffic. 

As  suggested  earlier,  the  use  of  Multics  systems  Is  an 
option.  Based  on  other  experiences,  two  Multics  systems 
should  have  sufficient  power  to  perform  the  GENSER  message 
processing  tasks.  A  WWMCCS  Is  desirable  as  backup; 
otherwise  a  third  MULTICS  would  perhaps  be  required. 
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Message  processors  interface  traffic  (peaked) 
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INTELLIGENCE  TRAFFIC  TERMINAL  CONSIDERATIONS 

The  terminal  count  for  the  Island  Is  based  on  the 
organization  directories  and  It  must  be  assumed  that  the 
Intelligence  community  has  been  taken  Into  account  since  It 
Is  apparently  a  subset  of  the  action  people  already 
considered.  However,  where  both  Intelligence  and  GENSER 
traffic  are  made  available  to  the  same  office,  a  separate 
terminal  Is  required. 

The  special  encryption  device  for  Intelligence  traffic 
(Figure  6)  mu^t  also  be  considered  In  the  sizing  of  the 
system.  These  special  encryption  devices  (we  are  told)  are 
minicomputers  and  are  attached  to  the  TIP  as  a  host  capable 
of  servicing  several  terminals.  The  data  Is  asynchronous 
and  requires  a  minima)  amount  of  overhead  traffic  at  the 
beginning  and  end  of  each  transmission. 

Therefore,  If  the  system  Is  sufficiently  protected  so 
that  certain  designated  terminals  can  support  Intelligence 
and  GENSER  traffic,  the  majority  of  terminals  for  this 
community  have  been  considered.  The  option  of  Implementing 
a  separate  Intelligence  network  would  require  additional 
terminals  for  the  action  officers. 
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INTRODUCTION 

Budgetary  estimates  for  the  system  as  described  In  the 
previous  section  are  summarized  In  Table  6.  Implementation 
costs  are  shown  for  the  TENEX  plan.  Commercial  retail 
prices  are  used  rather  than  GSA  schedules.  The  Multics 
version  would  vary  significantly  upward  only  In  processor 
costs.  Software  development  estimates  are  also  Included  In 
Table  6. 

HARDWARE  COSTS 

The  proposed  architecture  suggests  a  long  system  life 
expectancy.  Thus,  a  reasonably  safe  ammorti zatlon  period  of 
five  years  was  chosen  for  the  calculations  appearing  In 
Table  6,  which  yield  an  annual  expenditure  of  $1*.72  million. 
The  hardware  line  Items  of  Table  6  are  self-evident  with  the 
exception  of  communication  links.  The  TIP-to-TIP  link  costs 
are  based  on  an  analysis  of  network  topology  provided  by  the 
Network  Analysis  Corporation. 
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SOFTWARE  DEVELOPMENT  COSTS 

The  labor  charges  of  Table  6  ($1.6  million)  are  based 
on  an  estimate  of  the  num.'>er  of  man-years  of  development 
required  by  personnel  currently  engaged  In  similar 
ARPA-sponsored  activities.  These  designers  and  programmers 
are  experienced  In  Interactive,  resource-sharing  systems  and 
networks.  In  particular,  they  have  been  responsible  for 
developing  the  major  components  of  the  recommended 
architecture,  I .e.  TENEX  or  Multics  and  the  ARPANET. 

A  significant  amount  of  money  has  been  Invested  In  the 
development  of  each  of  these  systems  ($20  million  for  TENEX 
and  $40  million  for  Multics).  Since  each  was  designed  with 
extensibility  In  mind,  the  low  cost  of  Table  6  reflects  the 
ability  to  capitalize  on  ongoing  and  prior  developments. 
This  architecture  and  these  systems  have  been  designed 
specifically  as  a  solution  to  large-scale  communications 
problems,  and  can  therefore  be  economically  adapted  to  Oahu. 

OPERATION  AND  MAINTENANCE  COSTS 

Operation  and  maintenance  personnel  requirements  are 
based  on  the  five  shift  multiplier  currently  used  on  Oahu  to 
account  for  sick  leave,  transfer,  etc. 
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MESSAGE  SERVICE  IMPLEMENTATION  COST  (TENEX  PLAN) 


HARDWARE 


TOTAL 

FIVE-YEAR 

ITEM 

QUANTITY 

PRICE 

AMMORTIZED  COST 

MSG.  PROC, 

5 

7.5M 

1500K/YR. 

TIP 

37 

3.7M 

7A0K/YR . 

SUBNET  CRYPTO 

16A 

1.6M 

320K/YR. 

SUBNET  MODEMS 

m 

.5M 

IOOK/yr . 

TERMINAL 

2000 

7.0M 

IAOOK/yr . 

TERMINAL  MUX 

167 

.5M 

IOOK/yr. 

TERMINAL  CRYPTOS 

167 

1.7M 

3A0K/YR. 

INT.  NET.  TRANS. 

2 

.2M 

AOK/yr. 

COMMUNICATION  LINKS 

82  LINKS 

180K/YR. 

22. 7M 

A720K/YR. 

DIRECT  LABOR 

MAN-YEARS 

SOFTWARE 

TENEX 

15 

INT 

A 

TIP 

3 

FIELD  ENGINEERING 

6 

DOCUMENTATION 

A 

32  9  $50K  EACH  =  $1600K 


MAINTENANCE  &  OPERATIONS  people/shift 


MSG,  PROC.  PEOPLE 

HARDWARE  MAI  NT.  6 

SOFTWARE  MAI  NT.  &  UPDATE  6 

OPERATORS  6 

SUPERVISORS  3 

TIP  MAINT,  &  FIELD  SERVICE  2 

TERMINAL  MAINT, /PERSONNEL  EDUCATION  12 


35  X  5  SHIFTS  =  175 

MISC,  10 

TOTAL  185 
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MESSAGE  PROCESSORS 

The  preceding  sections  have  presented  a 
tel econnunl cat  I ons  system  Implementation  which  Is  an 
adaptation  of  an  existing  communications  network  —  the 
ARPANET,  Candidate  message  processors  were  chosen  from  two 
systems  currently  In  operation  on  the  ARPANET:  TENEX  and 
Multics, 

Neither  of  the  candidate  systems  currently  functions 
solely  as  a  message  processor.  However,  both  of  their 
operating  systems  lend  themselves  to  modification  In  support 
message  processing  function.  Necessary  changes,  and 
estimates  of  their  complexity,  are  reflected  In  Tables  7-9. 

The  changes  to  either  system  are  confined  to  those 
areas  which  address  specific  aspects  of  the 
message-processing  function  —  routing,  releasing, 
distributing,  etc.  User-system  Interaction,  such  as  text 
editing.  Is  a  capability  that  Is  available  on  both  systems 
and  would  remain  almost  Intact  during  the  conversion  of  the 
system  to  a  dedicated  message  processor.  SImlllarly,  the 
general  resource-scheduling  and  resource-sharing  mechanisms 
would  be  transferred  Intact  to  the  message-processing  role. 
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MESSAGE  PROCESSOR  CHANGES 

SIMPLE  editor/file  ACCESS 
TICKLER  file/coordination  MODULE 
ROUTING  FUNCTIONS 

RECEIPT  OF  MESSAGE  POSITIVE  ACKNOWLEDGEMENT 

AUTO  DUAL  FILE  MAINTENANCE 

UPDATE  DISK  FROM  CORE/dRUM 

REDUNDANT  TIP  INTERFACE 

ACCOUNTING,  AUDIT  TRAILS 
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IMPLEMENTATION  CONSIDERATIONS  (cont.) 


MESSAGE  PROCESSOR  -  NETWORK  CONNECTION 

The  redundant  TIP  Interface  does  not  exist,  nor  are  the 
exlsthig  accounting  and  audit  trails  adequate  for  the 
Bllltary  environment.  Functionally,  these  I  terns  are 
straightforward  but  they  are  not  presently  available  on  the 
ARPANET  and  would  require  a  modest  amount  of  development  and 
I mpleroental  on. 

TIP  CHANGES 

The  TIP  Improvements  listed  In  Table  8  are 
sel f-explanatory . 

I  NT  SOFTWARE 

The  Inter-Network  Translator  software  does  not  exist 
although  the  system  functions  and  protocols  are  quite 
similar  to  those  of  other  hosts  on  the  ARPANET.  Table  9 
lists  the  basic  function  that  must  be  progrpmmed  for  this 
ml nl -computer. 

WWMCCS  INTEGRATION  ADVANTAGES 

Five  WWMCCS  machines,  based  on  the  Honeywell  6050  and 
GEC0S3*  are  planned  for  Island  data  processing  services. 
Table  10  lists  some  advantages  of  Integrating  these  machines 
Into  the  proposed  communications  network  for  message 
services. 
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Table  8 


TIP  CHANGES 


•  CRYPTO  SYNCH  FAILURE  RECOVERY 

•  SECURITY  LEVEL  SEPARATION 

•  REDUNDANT  HOST  INTERFACE 
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Table  9 


I NT  SOFTWARE  FUNCTIONS 

•  ROUTING  to/from  AUTODIN 

•  ROUTING  to/from  MESSAGE  PROCESSORS 

•  ROUTING  to/from  OTHER  HOSTS  (WWMCCS) 

•  ALTERNATE  ROUTING  TO  TIP  STATIONS 

•  bi-directional  reformatting 

•  ACCOUNTING  AND  AUDIT  TRAILS 


Table  10 


WWMCCS  INTEGRATION  ADVANTAGES 


1.  RESOURCE  AND  DATA  SHARING  VIA  ESTABLISHED 
NET  AT  ESSENTIALLY  NO  ADDITIONAL  COST. 

2.  COMMON  TERMINALS- 

reduce:  cost>  training^  maintenance^  etc. 

3.  REDUNDANT  FACILITIES  PER  USER  EXTENDED  TO 
USER  LOCATION. 

4.  SOFTWARE  COMMONALITY  ENCOURAGED. 

5.  PROVIDES  SIMULTANEOUS  OAHU  CONSOLIDATION 
AND  WORLD-WIDE  CONNECTIVITY. 

6.  POSSIBLE  FUTURE  COMMON  WWMCCS  HARDWARE 

FOR  MP  FUNCTION  WILL  PROVIDE  FURTHER  BACKUP. 
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IMPLEMENTATION  CONSIDERATIONS  (cont.) 


The  WVtICCS  machines  are  not  currently  notted,  but  they 
can  be  connected  to  the  proposed  convnun?  catl  on  network  at 
essentially  no  additional  cost;  assuming  the  operating 
systers  on  the  machines  provide  the  services,  data  sharing 


Is  Instantly  established 

to 

the  then 

exi stent 

network 

of 

Interactive  terminals. 

Software 

commonal  I  ty 

would 

be 

encouraged,  which  aids 

I  n 

consolidation  of  services 

and 

service  centers,  not 

only 

on  the 

Island  of 

Oahu 

but 

wor I dwi de. 

If  Multics  were  chosen  as  the  message  processor,  then 
there  Is  the  future  possibility  of  common  WWMCCS  hardware 
[♦]  ,  allowing  emergeiKy  backup  for  the  message-processing 
service  and  more  flexibility  In  expansion  and  contraction, 
plus  all  the  advantages  of  common  hardware  for  maintenance, 
personnel,  management,  etc. 

IMPLEMENTATION  MILESTONES 

It  Is  necessary  to  bring  up  a  new  system  In  parallel  to 
the  existing  centers  so  as  not  to  disrupt  message  service 
for  the  action  officer.  Further,  to  establish  confidence  In 
system  operation.  Imp lemeni at  Ion  should  be  staged  so  that  it 
can  be  provided  In  parallel  at  one  major  command  within  the 
Oahu  complex.  Camp  Smith  Is  felt  to  be  a  good  choice  since 


*  The  Honeywell  6050  Is  field-upgradable  to  the  Multics 

6180 
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IMPLEMENTATION  CONSIDERATIONS  (cont.) 


It  Is  the  site  of  the  CINCPAC  communications  group.  As 
shown  In  Table  11,  this  milestone  would  Involve  several 
hundred  terminals  so  as  to  completely  service  that  command. 
Also  because  of  the  compactness  of  this  site  It  can  be 
Implemented  with  minimal  line  and  equipment  Installation. 
Figure  7  Indicates  the  probable  distribution  of  equipment 
land  conduit  requirements  for  Camp  Smith.  A  parallel 
connection  to  AUTOOIN  and  a  second  message  processor  (for 
continuous  service)  would  be  established  to  provide  a 
complete  parallel  message  service  for  that  major  location. 
At  this  point,  the  system  would  serve  the  command  completely 
while  backed  up  by  the  old  system.  The  end  goal  of  this 
phase  would  be  to  establish  user  confidence  to  support  the 
next  phase. 

The  second  major  phase  would  be  the  extension  of  the 
service  to  all  sites  and  replacement  of  their  present 
systems  as  user  confidence  Is  Instilled.  Lastly,  other 
services,  such  as  WWMCCS,  would  be  Incorporated. 
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Table  11 


IMPLEMENTATION  MILESTONES 


I.  ESTABLISH  SYSTEMS  CONFIDENCE 

•  SMALL  NETWORK  TO  PARALLEL  EXISTING  ON-ISLAND 
MESSAGE  SERVICE  AT  ONE  MAJOR  SITE 

1  MESSAGE  PROCESSOR 
^  TIPS 

200  TERMINALS 

•  PARALLEL  CONNECTION  TO  AUTODIN  SWITCH 

1  INT 
1  TIP 

•  2nd.  message  processor  for  CONTINUOUS  SERVICE 

II.  ESTABLISH  USERS  CONFIDENCE 

•  PROVIDE  FULL  MESSAGE  SERVICE 

1)  ASSUME  PRIMARY  SERVICE  FOR  CURRENT  SUBSCRIBERS 

2)  EXTEND  SERVICE  TO  ALL  SUBSCRIBERS  FOR  TOTAL  OF: 

A  MESSAGE  PROCESSORS 
37  TIPS 

2000  TERMINALS 

3)  INTEGRATE  WWMCCS 

•  INTERCONNECT  AND  INTEGRATE  OTHER  SYSTEMS 


I 
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